VulnSocial

CVE-2019-3706General(dell / idrac9_firmware)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.

dell CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • idrac9_firmware

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
dell
Products
idrac9_firmware

3 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-31: 107-31
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • Voidwalker@JustWantToQ1
    General

    There are some older vulns like: CVE-2019-3706/CVE-2019-3707/CVE-2019-3705 but really you don't even need a vuln with the level of opsec failures going on, here. Just a C2 to orchestrate scraping free proxies to use in checking user:pass combos. If you do a bit of OSINT on the corp you can likely already find an old admin password that's never been changed by anyone other than 1 guy who set this up long ago.

    Post summary

    The post lists older CVE identifiers but offers no detailed technical insight, PoC, patch, or evidence of active exploitation. It focuses on operational tactics rather than vulnerability specifics.

    10010169
    3.0K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
OSdellidrac9_firmware3.20.21.20--
OSdellidrac9_firmware3.21.24.22--
OSdellidrac9_firmware3.23.23.23--

Explore more

Back to dashboarddell CVEsidrac9_firmware vulnerabilities